BrandSSL manages the entire SSL lifecycle for your customers' vanity domain names, from private key creation and protection through domain validation, issuance and re-issuance. Keys never leave hardened infrastructure, and renewal happens on its own, well before expiry.
We issue through multiple certificate authorities, Let's Encrypt and ZeroSSL, so a rate limit or an outage at one authority never blocks your customers.
The newest standard for transport security, faster and safer than its predecessors.
Root domains and subdomains are both secured automatically, no special handling.
Choose a default certificate authority, or let BrandSSL pick the fastest path.
Bring your own certificates when a customer requires it, managed through the API.
Route different domains to different application endpoints when you need to.
Append custom headers with dynamic values to your traffic, along with URL rewrites.
Use a Cloudflare proxied endpoint and configure its settings from the dashboard.
Get notified when a domain is secured, so your app can update itself in real time.
The default mode. Any domain pointed at your BrandSSL address is validated and secured within a few seconds of its first request. There is nothing to integrate and nothing to call.
Your platform decides exactly which domains get certificates and when. Add and remove domains, read status and receive webhooks. See the API documentation.
Try BrandSSL free for three days. Cancel anytime.
Start Free Trial